Skip to content

Commit

Permalink
Add IP to testing results
Browse files Browse the repository at this point in the history
When specifying multiple hosts the resulting output is useless because you don't know which bypass goes to what IP address
  • Loading branch information
b6938236 committed Sep 30, 2015
1 parent 838bba1 commit 1bfa087
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions modules/auxiliary/scanner/http/verb_auth_bypass.rb
Original file line number Diff line number Diff line change
Expand Up @@ -77,10 +77,10 @@ def test_verbs(ip)

next if not resauth

print_status("Testing verb #{tv}, resp code: [#{resauth.code}]")
print_status("[#{ip}] Testing verb #{tv}, resp code: [#{resauth.code}]")

if resauth.code != auth_code and resauth.code <= 302
print_status("Possible authentication bypass with verb #{tv} code #{resauth.code}")
print_good("[#{ip}] Possible authentication bypass with verb #{tv} code #{resauth.code}")

# Unable to use report_web_vuln as method is not in list of allowed methods.

Expand Down

0 comments on commit 1bfa087

Please sign in to comment.